This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json) Hash identifier: sEllodZMt99CkUQHdILClHgQUWyqNN55pVubqVwgd00= Subject key identifier: 7B:30:BE:28:05:EB:F4:04:AC:0A:E8:23:09:D2:B9:01:61:B2:AF:54 Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Certificate serial: 019C465ADE7F24DBB19ECE9CAAB79ADC6CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft Manifest number: 1815 Signing time: Tue 10 Feb 2026 07:01:26 +0000 Manifest this update: Tue 10 Feb 2026 07:01:26 +0000 Manifest next update: Wed 11 Feb 2026 07:01:26 +0000 Files and hashes: 1: YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa (hash: yfGpXBMwfuCn+DMxXYn3DWhF4inc0qBH11Kt+d+QCNw=) 2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: 7iLz3YlTzH544RwdA3iHbBu8pUpcQzTu8H5UrVoqCyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:46:5a:de:7f:24:db:b1:9e:ce:9c:aa:b7:9a:dc:6c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c Validity Not Before: Feb 10 07:01:26 2026 GMT Not After : Feb 11 07:01:26 2026 GMT Subject: CN=7b30be2805ebf404ac0ae82309d2b90161b2af54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4d:cf:89:78:7f:2f:2b:9d:b5:8d:93:6a:cc: 63:f5:be:b0:8c:13:ee:e6:ce:7f:95:a3:25:18:1c: 2b:11:f8:4c:ed:ff:88:20:e6:34:43:55:8e:f8:61: 3d:52:a1:1b:55:91:96:25:1c:a7:39:23:23:1b:fc: 9b:8c:9f:41:77:64:98:d3:a4:a2:9a:58:5e:20:3f: 27:e7:9b:6b:a4:da:9e:55:cb:b9:98:86:93:fe:5c: 26:0e:83:f2:47:62:55:9b:2f:59:01:e1:12:2c:45: 08:ef:2e:8a:77:af:a4:ff:34:3f:6f:3e:12:dd:59: b4:fb:63:5f:cc:ef:9f:b0:ff:ac:83:3d:a2:60:7a: 24:87:11:6b:c8:32:96:f0:c5:62:aa:c1:11:92:3c: 3d:20:16:90:79:25:6d:d8:75:28:6b:52:e2:8a:5d: fc:ce:28:4d:64:79:42:fe:6a:08:e3:9b:34:c3:b6: 02:ce:98:e1:2f:bf:a6:3f:01:03:9e:95:b3:52:38: d4:b7:5e:cf:7e:66:96:66:4a:c8:95:c7:f2:a3:a9: 54:8b:40:6e:6e:c6:e9:33:cf:44:c3:7a:4e:85:e7: 3b:b7:ac:d5:60:ee:b9:9a:0a:82:bf:39:21:f9:e4: 55:ba:8d:cc:70:98:c8:72:8c:36:c1:96:0a:57:59: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:30:BE:28:05:EB:F4:04:AC:0A:E8:23:09:D2:B9:01:61:B2:AF:54 X509v3 Authority Key Identifier: keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:27:2e:f5:ed:0e:c7:a6:94:e3:9b:94:4b:7a:0c:d4:a5:a1: 10:ec:0d:32:12:d2:ff:f3:26:93:75:62:cd:6e:3b:a3:40:35: 0f:86:51:1c:fa:c3:0e:b2:ad:bf:6e:44:f3:ef:32:b4:75:3d: f8:aa:a6:c8:a2:b1:13:c0:93:17:ca:93:1a:46:4b:f4:6b:0a: bb:c5:cb:90:be:75:55:dd:4d:cc:39:ef:2b:5d:86:52:58:3f: 9a:38:f1:8e:2f:d3:9f:de:a4:2f:90:7e:78:c4:c4:8c:4b:1c: 8b:5f:08:c7:da:6f:e3:96:3b:56:b2:58:b4:1b:49:2c:93:31: 18:b6:89:ec:27:00:d3:ef:55:2e:3f:64:ea:b2:89:4e:03:43: 51:23:b7:05:62:29:5d:ae:aa:ad:60:b0:ef:c2:c8:6e:40:60: e4:51:ac:7e:80:4c:91:bb:71:12:01:00:6e:b1:12:fb:cf:42: 35:11:ab:c5:20:b4:b9:31:46:ca:92:97:90:7b:9e:d6:10:71: a8:74:35:68:43:3a:19:f9:a4:bb:15:b0:11:e8:b7:4f:aa:0d: b7:ea:cf:d0:37:be:53:33:14:87:a5:ba:e6:50:51:3f:fb:b8: 20:89:b1:bf:be:0d:09:1c:c9:5b:b7:82:06:97:9e:22:5c:67: 90:df:24:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxGWt5/JNuxns6cqrea3Gz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NDEwNjU0MGYzMGE5ZGNkZjhlZjliZTcyZmZlZjhiZDhh NzJlNWMwHhcNMjYwMjEwMDcwMTI2WhcNMjYwMjExMDcwMTI2WjAzMTEwLwYDVQQD Eyg3YjMwYmUyODA1ZWJmNDA0YWMwYWU4MjMwOWQyYjkwMTYxYjJhZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi03PiXh/LyudtY2Tasxj9b6wjBPu 5s5/laMlGBwrEfhM7f+IIOY0Q1WO+GE9UqEbVZGWJRynOSMjG/ybjJ9Bd2SY06Si mlheID8n55trpNqeVcu5mIaT/lwmDoPyR2JVmy9ZAeESLEUI7y6Kd6+k/zQ/bz4S 3Vm0+2NfzO+fsP+sgz2iYHokhxFryDKW8MViqsERkjw9IBaQeSVt2HUoa1Liil38 zihNZHlC/moI45s0w7YCzpjhL7+mPwEDnpWzUjjUt17PfmaWZkrIlcfyo6lUi0Bu bsbpM89Ew3pOhec7t6zVYO65mgqCvzkh+eRVuo3McJjIcow2wZYKV1mxQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHswvigF6/QErAroIwnSuQFhsq9UMB8GA1UdIwQY MBaAFIZBBlQPMKnc3475vnL/74vYpy5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTct M2IzMThlNDcyNzZkLzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wYmU3ZjItNjM4ZC00ZjQ1LWI2OTctM2IzMThlNDcyNzZk LzEvaGtFR1ZBOHdxZHpmanZtLWN2X3ZpOWluTGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgicu9e0O x6aU45uUS3oM1KWhEOwNMhLS//Mmk3VizW47o0A1D4ZRHPrDDrKtv25E8+8ytHU9 +KqmyKKxE8CTF8qTGkZL9GsKu8XLkL51Vd1NzDnvK12GUlg/mjjxji/Tn96kL5B+ eMTEjEsci18Ix9pv45Y7VrJYtBtJLJMxGLaJ7CcA0+9VLj9k6rKJTgNDUSO3BWIp Xa6qrWCw78LIbkBg5FGsfoBMkbtxEgEAbrES+89CNRGrxSC0uTFGypKXkHue1hBx qHQ1aEM6GfmkuxWwEei3T6oNt+rP0De+UzMUh6W65lBRP/u4IImxv74NCRzJW7eC BpeeIlxnkN8kpQ== -----END CERTIFICATE-----Generated at Tue Feb 10 10:15:18 2026 by rpki-client